CVE-2014-1361 — Sensitive Information Exposure in Apple Iphone OS

CWE-200 — Sensitive Information Exposure2 documents2 sources
Severity
5.0MEDIUMNVD
EPSS
0.8%
top 26.22%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Apple Iphone OSApple TvosApple MAC OS X
Timeline
PublishedJul 1
Latest updateMay 14

Description

Secure Transport in Apple iOS before 7.1.2, Apple OS X before 10.9.4, and Apple TV before 6.1.2 does not ensure that a DTLS message is accepted only for a DTLS connection, which allows remote attackers to obtain potentially sensitive information from uninitialized process memory by providing a DTLS message within a TLS connection.

CVSS vector

AV:N/AC:L/C:P/I:N/A:NExploitability: 10.0 | Impact: 2.9

Affected Packages3 packages

▶NVDapple/tvos6.1.1+4
▶NVDapple/iphone_os7.1.1+8
▶NVDapple/mac_os_x4 versions+3

🔴Vulnerability Details

1
GHSA
GHSA-8gjh-39j4-6x54: Secure Transport in Apple iOS before 7↗2022-05-14
▶